Privacy Policy — 299com Casino

1 Data We Collect

299com collects personal data from you in several ways: directly through information you provide during registration and account use, automatically through your interaction with the Platform, and in limited cases from trusted third-party sources such as payment processors and identity verification services. The categories of personal data we collect are described below.

1.1 Registration and Account Data

When you create a 299com account, we collect the information you provide in the registration form, including:

• Full legal name as it appears on your government-issued identity document
• Date of birth (required for age verification — 18+ only)
• Residential address in Bangladesh (city, district, and postal code)
• Email address (used as your primary account identifier and communication channel)
• Mobile phone number (used for account security and payment method linking)
• Username and encrypted password (your password is stored using one-way hashing and is never accessible to 299com staff in plain text)
• Currency preference (BDT — Bangladeshi Taka)

1.2 Identity Verification (KYC) Data

To comply with our obligations under internationally recognised anti-money laundering (AML) and know-your-customer (KYC) frameworks, we may collect the following documentation from you:

• A copy of your National Identity Card (NID), passport, or driver's licence
• A proof-of-address document such as a utility bill, bank statement, or official government letter issued within the last three months
• Confirmation that the payment method used for deposits is registered in your name (e.g., your bKash or Nagad wallet registered to your NID)
• In higher-risk cases, source-of-funds documentation may be requested

1.3 Transaction and Financial Data

We collect records of all financial transactions conducted through your 299com account, including deposits, withdrawals, bonus credits, wager amounts, game outcomes, and any adjustments made by our team. Transaction records include the payment method used (e.g., bKash wallet number, Nagad account reference), transaction timestamps, amounts in BDT, and status codes. We do not store full card numbers or mobile banking PINs — payment authentication occurs on the payment provider's own secured infrastructure.

1.4 Gameplay and Betting Data

We log details of your gambling activity on the Platform, including the games you play, bets placed, wager amounts, game session durations, betting history, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

1.5 Technical and Device Data

When you access the 299com Platform, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type (desktop or mobile), screen resolution, referring URL, pages visited, and session timestamps. This data is used for security monitoring, fraud detection, and service optimisation.

1.6 Communications Data

If you contact our support team via email or live chat, we retain records of those communications including the content of messages, timestamps, and the resolution applied. This data is used to maintain service quality, resolve disputes, and improve our support operations.

2 How We Use Your Data

299com uses the personal data we collect for specific, legitimate purposes that are directly connected to providing you with a safe, fair, and personalised gambling experience. We do not use your data for purposes beyond those described in this section without first obtaining your explicit consent.

2.1 Marketing Communications

299com may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new game launches, cricket betting promotions, and seasonal offers relevant to Bangladesh — such as Eid specials, Pohela Boishakh promotions, or BPL tournament campaigns — but only where you have opted in to receive such communications. You may withdraw your consent to marketing communications at any time by contacting [email protected] or by updating your notification preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

3 Legal Basis for Processing

299com processes personal data on the following legal bases, consistent with internationally recognised data protection frameworks:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you as a registered player — including account creation, game access, payment processing, and customer support.
• Legal Obligation: We are required to process certain data to comply with legal obligations, including anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and age verification mandates. This processing is mandatory and cannot be refused without affecting your ability to use the Platform.
• Legitimate Interests: We process certain data on the basis of our legitimate interests in operating a secure, fair, and commercially viable platform — including fraud detection, responsible gaming monitoring, security logging, and aggregated analytics. We have assessed that these interests are not overridden by your privacy rights in each applicable case.
• Consent: Where we process data for purposes beyond the above — specifically for optional marketing communications — we rely on your freely given, informed, and specific consent. You may withdraw consent at any time without penalty.

4 Data Sharing & Third Parties

299com does not sell, rent, or trade your personal data to any third party for their own independent commercial or marketing purposes. We share your personal data only in the following limited and controlled circumstances:

4.1 Payment Processors

To process your deposits and withdrawals in BDT, we share the minimum necessary transaction data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card scheme operators such as Visa and Mastercard. Each payment partner is bound by their own data protection obligations and by contractual commitments to 299com governing the use of any data shared with them.

4.2 Identity Verification Providers

To fulfil our KYC and age verification obligations, we may share identity document data with trusted third-party identity verification service providers. These providers are contractually prohibited from using your data for any purpose other than the specific verification task for which it was shared.

4.3 Game Studios and Technology Providers

The casino games available on 299com are supplied by international game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive session identifiers and anonymised gameplay metadata necessary to deliver the game experience, but they do not receive your full personal profile, contact details, or financial data.

4.4 Legal and Regulatory Disclosure

We may be required to disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we receive a lawful request, court order, or are under a legal obligation to do so. In such cases, we will disclose only the minimum data required to fulfil the legal obligation and will notify you of the disclosure where we are legally permitted to do so.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the 299com business, your personal data may be transferred to the successor entity as part of the transaction. We will notify affected players in advance of any such transfer and will ensure that the receiving entity is bound by privacy obligations at least as protective as those set out in this policy.

5 Cookies & Tracking Technologies

The 299com Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain session security, and to improve your overall experience. This section explains what cookies we use and why.

5.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function efficiently, to remember your preferences, and to provide basic analytics to site operators. Cookies cannot execute code or deliver viruses, and they do not access other files on your device.

5.2 Types of Cookies We Use

5.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling strictly necessary cookies will affect the functionality of the 299com Platform — you may be unable to log in or maintain a secure session. Disabling functional or analytics cookies will not prevent you from using the Platform but may reduce the quality of your experience.

Consult your browser's help documentation for instructions on managing cookies for your specific browser and device combination.

6 Data Retention

299com retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The general retention periods we apply are set out below:

• Active Account Data: Retained for the duration of your active account relationship with 299com, plus a minimum period of five (5) years after account closure to satisfy AML and KYC record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with internationally recognised financial record-keeping standards.
• KYC Documentation: Retained for a minimum of five (5) years following account closure, or longer if required by a regulatory authority or ongoing legal investigation.
• Support Communications: Retained for three (3) years from the date of last interaction, unless the communication relates to an unresolved dispute or legal matter, in which case it is retained until final resolution.
• Technical and Log Data: Retained for up to twelve (12) months, after which it is either deleted or anonymised for aggregate analytics purposes.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years after consent withdrawal, as evidence of the consent relationship.

When personal data is no longer required, it is securely deleted or anonymised in a manner that prevents reconstruction of the original information. Physical documents, where applicable, are destroyed using secure shredding methods.

7 Your Data Rights

As a player registered with 299com, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of your request. We will acknowledge your request within 72 hours and provide a substantive response within thirty (30) calendar days.

7.1 Right of Access

You have the right to request a copy of the personal data that 299com holds about you, along with information about how it is being used, where it was obtained from, and with whom it has been shared. We will provide this information in a clear, structured format at no charge for standard requests.

7.2 Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data categories (such as your registered name or date of birth), we may require supporting documentation before making any changes, to ensure the accuracy of the corrected record.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you believe the data has been unlawfully processed. Please note that this right is subject to limitations where we are required to retain data for legal or regulatory compliance — in such cases, we will inform you of the specific legal obligation preventing deletion and the expected retention period.

7.4 Right to Restrict Processing

In certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed — you may request that we restrict the processing of your data to storage only, pending resolution of the matter.

7.5 Right to Object

You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. Where you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. You also have the absolute right to object to direct marketing at any time, with no grounds required.

7.6 Right to Data Portability

Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller.

8 Data Security

299com takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following safeguards:

• Transport Layer Security (TLS): All data in transit between your browser or device and our servers is encrypted using current TLS protocols, preventing interception by third parties.
• At-Rest Encryption: Sensitive data stored on our servers — including KYC documentation and financial records — is encrypted at rest using strong, industry-standard encryption algorithms.
• Access Controls: Access to personal data is strictly limited to authorised personnel with a documented operational need. Role-based access controls prevent staff from accessing data categories outside their designated responsibilities.
• Password Security: Passwords are stored exclusively as salted cryptographic hashes. Plain-text passwords are never stored or logged by 299com systems.
• Monitoring and Intrusion Detection: Our infrastructure is subject to continuous security monitoring, automated intrusion detection, and regular vulnerability assessments to identify and address potential threats proactively.
• Staff Training: All 299com personnel with access to personal data receive regular data protection and security awareness training.

8.1 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 299com will notify affected players without undue delay. Our incident response team maintains documented procedures for identifying, containing, and communicating data security incidents. We will provide you with clear information about the nature of the breach, the data involved, and the steps we are taking to address it and prevent recurrence.

8.2 Your Role in Security

While we take all reasonable steps to protect your data on our end, the security of your 299com account also depends on the steps you take to protect your access credentials. You should use a strong, unique password for your 299com account, avoid sharing your login credentials with anyone, and contact [email protected] immediately if you suspect your account has been accessed without your authorisation. 299com will never ask for your password via email, live chat, or telephone.

For any privacy-related queries, requests, or complaints, please contact our dedicated support team:
[email protected]
Support hours: 24/7 | Bangladesh Standard Time (BST, UTC+6)